SANS Institute Cyber Solutions Fest

Explore the hidden risks of open-source software at the Cyber Solutions Fest: Spring. While open source has revolutionized modern application development, its reliance on volunteer-driven code introduces significant security vulnerabilities. This session will dive into how supply chain attacks, like the CodeCov incident and malicious packages on npm and PyPi, are exploiting these weaknesses. Attendees will gain insights into how to integrate open-source supply chain security into their threat modeling processes, ensuring safer development practices. Learn about attack vectors, practical defenses, and strategies to bolster your security posture from day one of development.

‍

Join us to understand the evolving landscape of open-source risks and how to mitigate them effectively.

‍

‍

‍